Health information management company Ciox Health has notified 32 providers of an email security incident affecting their patients' protected health information.
The company said an unauthorized person accessed a Ciox employee's email account between June 24, 2021, and July 2, 2021, and they may have downloaded emails and attachments in the account.
Ciox said some emails and attachments in the employee's email account contained patient information related to billing inquiries and other customer service requests. The information involved included patient names, provider names, dates of birth and dates of service. Ciox said patients' Social Security numbers, drivers' license numbers, health insurance information, and clinical and treatment information were also involved "in very limited instances."
Ciox notified its healthcare provider customers that were affected by the data breach between Nov. 23 and Dec. 30. It has also worked with the providers to notify the patients whose affected information was identified during Ciox's investigation.
Here is a list of the 32 providers affected by the data breach:
- AdventHealth – Orlando (Fla.)
- Alabama Orthopaedic Specialists (Prattville)
- Baptist Memorial Health Care (Memphis, Tenn.)
- Butler (Pa.) Health System
- Cameron Memorial Community Hospital (Angola, Ind.)
- Centra Health (Lynchburg, Va.)
- Children's Healthcare of Atlanta
- Coastal Family Health Center (Biloxi, Miss.)
- Copley Hospital (Morrisville, Vt.)
- DeSoto Memorial Hospital Health System (Arcadia, Fla.)
- EvergreenHealth (Kirkland, Wash.)
- Hoag Health System (Newport Beach, Calif.)
- Hospital Sisters Health System (Springfield, Ill.)
- Huntsville (Ala.) Hospital Health System
- Indiana University Health (Indianapolis)
- McLeod Health (Florence, S.C.)
- MD Partners (Grass Valley, Calif.)
- Niagara Falls (N.Y.) Memorial Medical Center Health System
- Northern Light Mercy Hospital (Portland, Maine)
- Northwestern Medicine (Chicago)
- Ohio State University Health System (Columbus)
- OrthoConnecticut (Danbury)
- Prisma Health (Greenville,.C.)
- Prisma Health – Palmetto Health (Greenville, S.C.)
- Sarasota (Fla.) Memorial Health Care System
- Trinity Health – Holy Cross Hospital (Fort Lauderdale, Fla.)
- Trinity Health – Mount Carmel Health System (Columbus, Ohio)
- Trinity Health – Saint Alphonsus Health System (Boise, Idaho)
- Trinity Health – St. Francis Medical Center (Trenton, N.J.)
- Trinity Health – St. Joseph Mercy Health System (Ann Arbor, Mich.)
- Union Hospital Healthcare System (Terre Haute, Ind.)
- Women's Health Specialist (Westland, Mich.)